Abstract: In various example embodiments disclosed herein, a Dynamic Security Architecture Environment (DSAE) security architecture is provided in an externally connectable endpoint device (the security device), which can be connected to an existing host endpoint device, such as a computer, laptop, tablet, phone, vehicle, medical device, Industrial Control System (ICS), or other electronic or Internet connected device. The example embodiments can implement the DSAE security architecture in the security device that connects to a host endpoint device to make the host endpoint device more secure by enabling the security device to combat cyber attacks targeted toward the host device. The example embodiments described herein also provide details for creating a security device that leverages the DSAE architecture, wherein the security device is configured to connect via a wired or wireless medium for data communication with a host endpoint device to make the host device more secure.